In many professional contexts, a bond is required to be paid.

In the Free Software world, packaging of applications generally involves a third-party who does that packaging, and has specific guidelines to adhere to. E.g., Debian Package Maintainers and the Debian Policy Manual.

Do not permit them. Free apps are just a way to reinforce the user-is-the-product problem that exists today.

Note: I don't agree with a "permissions tax."

You may also want to purchase your phone from a company that isn't the world's largest advertising company.

It's kinda funny that everyone is upset about a temp file when the device itself sends their entire porn history to Google everyday of the week.

Basically, if you don't want to be spied on, stop using Google products.